Summary

I am interested in web application security and vulnerability research.

Education

• Ph.D Student, Graduate School of Information Security, KAIST

  Present
• M.S., Graduate School of Information Security, KAIST

  2022
• B.S., School of Computing, KAIST

  2020

Work Experience

• Web Developer Intern, Inc. H2K: 2018 - 2019

Publications

• Zelda: Feedback-driven Closed-box Fuzzing for Identifying Web Application Vulnerabilities (WWW'26)
  Soyoung Lee, Sunnyeo Park, Yonghwi Kwon, Sooel Son
• Connecting the Dots: An Investigative Study on Linking Private User Data Across Messaging Apps (NDSS'26)
  Junkyu Kang, Soyoung Lee (co-leading author), Yonghwi Kwon, Sooel Son
• Link: Black-box detection of cross-site scripting vulnerabilities using reinforcement learning (WWW'22)
  Soyoung Lee, Seongil Wi, Sooel Son
• 강화 학습을 이용한 웹 애플리케이션 취약점 탐지 현황 (KCC'21)
  Soyoung Lee, Sooel Son

Teaching

Teaching Assistant

• CS447, 2024 Spring, 2025 Spring Web Security Attack Laboratory
• IS593, 2023 Spring Introductory Special Topics in Security and Privacy
• IS542, 2022 Fall Web Service Security and Privacy
• CS492, 2021 Fall Special Topics in Computer Science (Web Security Attack Laboratory)
• CS206, 2021 Spring Data Structure

Tutor

• KAIST Science Youth Camp: 2017 Summer, 2018 Summer

Academic Service

Program Committee

• WWW, 2026